Management apparatus and non-transitory computer readable medium for setting security levels of users in group resulting from unification

1. A management apparatus comprising:

a memory device that stores, for each of a user belonging to a first group and a user belonging to a second group, an authentication level of a domain assigned to a corresponding one of the user belonging to the first group and the user belonging to the second group;

a hardware processor electrically connected to the memory device and configured to:

set a unification policy that specifies a relationship between the authentication level and a security level for a state after unification by using an input device or a communication interface (I/F);

set the security level in a case where the first group and the second group undergo the unification into a third group, the security level being set for each of the users belonging to the third group by using the authentication level and the unification policy; and

assign a service use license to each of the users in the third group by using the set unification policy so as to implement the security level set for each of the users belonging to the third group.

2. The management apparatus according to claim 1 ,

wherein the hardware processor is further configured to set, for each of the users in the third group by using the unification policy, whether or not to assign the service use license.

3. The management apparatus according to claim 1 ,

wherein the hardware processor is further configured to set, for each of the users in the third group by using the unification policy, whether or not to assign an administrator right for a service.

4. The management apparatus according to claim 2 ,

wherein the hardware processor is further configured to set, for each of the users in the third group by using the unification policy, whether or not to assign an administrator right for a service.

5. The management apparatus according to claim 1 ,

wherein the memory device stores a use frequency on a per user basis, and

wherein the hardware processor is further configured to set the security level for each of the users belonging to the third group by using the authentication level, the unification policy, and the use frequency.

6. The management apparatus according to claim 1 ,

wherein the authentication level includes a first authenticated level, a second authenticated level lower than the first authenticated level, and an unauthenticated level, and

wherein the hardware processor is further configured to set an authenticated user level for a user with the first authenticated level and set a guest user level for a user with the second authenticated level and a user with the unauthenticated level.

7. The management apparatus according to claim 1 ,

wherein the authentication level includes a first authenticated level, a second authenticated level lower than the first authenticated level, and an unauthenticated level, and

wherein the hardware processor is further configured to set an authenticated user level for a user with the first authenticated level and a user with the second authenticated level and set a guest user level for a user with the unauthenticated level.

8. The management apparatus according to claim 1 ,

wherein the authentication level includes a first authenticated level, a second authenticated level lower than the first authenticated level, and an unauthenticated level, and

wherein in a case where the second group undergoes the unification by absorption by the first group, the hardware processor is further configured to set the guest user level for the user in the second group regardless of the authentication level.

9. The management apparatus according to claim 2 ,

wherein the authentication level includes a first authenticated level, a second authenticated level lower than the first authenticated level, and an unauthenticated level, and

wherein the hardware processor assigns the service use license to a user with the first authenticated level and does not assign the service use license to a user with the second authenticated level and a user with the unauthenticated level.

10. The management apparatus according to claim 2 ,

wherein the authentication level includes a first authenticated level, a second authenticated level lower than the first authenticated level, and an unauthenticated level, and

wherein in a case where the second group undergoes the unification by absorption by the first group, the hardware processor does not assign the service use license to the user in the second group regardless of the authentication level.

11. The management apparatus according to claim 3 ,

wherein regardless of the authentication level, the hardware processor assigns the administrator right, as before, to a user who has the administrator right before the unification.

12. The management apparatus according to claim 4 ,

wherein regardless of the authentication level, the hardware processor assigns the administrator right, as before, to a user who has the administrator right before the unification.

13. The management apparatus according to claim 3 ,

wherein in a case where the second group undergoes the unification by absorption by the first group, the hardware processor does not assign the administrator right to the user in the second group regardless of the authentication level.

14. The management apparatus according to claim 4 ,

wherein in a case where the second group undergoes the unification by absorption by the first group, the hardware processor does not assign the administrator right to the user in the second group regardless of the authentication level.

15. A non-transitory computer readable medium storing a program causing a computer to execute a process comprising:

storing, for each of a user belonging to a first group and a user belonging to a second group, an authentication level of a domain assigned to a corresponding one of the user belonging to the first group and the user belonging to the second group;

setting a unification policy that specifies a relationship between the authentication level and a security level for a state after unification;

setting the security level in a case where the first group and the second group undergo the unification into a third group, the security level being set for each of the users belonging to the third group by using the authentication level and the unification policy; and

assigning a service use license to each of the users in the third group by using the set unification policy so as to implement the security level set for each of the users belonging to the third group.

16. A management apparatus comprising:

means for storing, for each of a user belonging to a first group and a user belonging to a second group, an authentication level of a domain assigned to a corresponding one of the user belonging to the first group and the user belonging to the second group;

means for setting a unification policy that specifies a relationship between the authentication level and a security level for a state after unification;

means for setting the security level in a case where the first group and the second group undergo the unification into a third group, the security level being set for each of the users belonging to the third group by using the authentication level and the unification policy; and

means for assigning a service use license to each of the users in the third group by using the set unification policy so as to implement the security level set for each of the users belonging to the third group.